Senior IT Engineer

About the role Dicey is a crypto-native online casino run by a small, fully remote team spread across the world. We're hiring a Senior IT Engineer to take ownership of our entire IT environment: identity and SSO on Okta, Google Workspace across multiple domains and legal entities, MDM and endpoint security for a global laptop fleet, and the automation that ties it all together. You'll report to the Head of Infrastructure & Security and work as the senior IT owner inside that team, not under a separate IT department. This is not a helpdesk job. Tier-1 support here is handled by AI agents, onboarding is about 90% automated end to end (HRIS record to shipped laptop to provisioned accounts), and offboarding for most regions runs itself. Your job is to inherit that machine, keep it healthy, and push more of the remaining manual work into it. Much of our tooling is code we wrote ourselves, for example, a TypeScript Cloudflare Worker that provisions and deprovisions accounts in apps without SCIM support, and we build and maintain it with LLM coding tools like Claude Code. You should be comfortable working that way, or eager to get there fast. What you'll do Own identity end to end: Okta as the IdP, SAML/OIDC app federation, SCIM, birthright access and push groups, Okta Workflows, and the lifecycle that flows from our HRIS into every downstream system. Administer Google Workspace across several domains and entities: organizational units, aliases, groups and routing rules, license reclamation automation, billing reconciliation ahead of renewals, and email delivery troubleshooting behind an email security gateway. Run device management for a mostly macOS fleet: Apple Business Manager with zero-touch enrollment, MDM blueprints and OS version control, annual push certificate renewals, EDR, and Cloudflare Zero Trust device verification. Maintain and extend our automation fleet: the Cloudflare Worker for non-SCIM provisioning (when a new app joins the stack, you write the handler), Okta Workflows, config-as-code group syncs into PagerDuty and Slack, and low-code automations for things like Slack channel governance. LLM coding tools are how we work on this, and you'll be expec ted to use them well. Keep our AI support agents effective by maintaining the SOP library they draw on and keeping ticket records accurate, since completed tickets are the dataset we mine to decide what gets automated next. The goal is Tier-1 staying self-service and Tier-2 access requests moving the same way. Handle hardware logistics for a distributed team: procurement through our warehouse vendor, automated retrieval kits where they exist, and hands-on international shipping where they don't, including customs invoices and lithium battery declarations. Repairs go through AppleCare rather than ad hoc replacement, and asset records live in an API-synced inventory system you'll keep accurate through every checkout, return, and redeployment.